5ddbe7b2841fe7b247b3458e76645971 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ddbe7b2841fe7b247b3458e76645971
Size

13KB
MD5

5ddbe7b2841fe7b247b3458e76645971
SHA1

11e6539b7e886038e55c2e721082ec16c452c697
SHA256

eb08a573403c9ea5da0c4360c05be1f3104c20e4aee5de24b3b1e6084fa41d5e
SHA512

21f3cf2f44a86c6a45e2e104bf2ddab17e53b8ab8602109af2292d09a563e2fcb0b9b190a82ee4cc0f3f019adbfe6bc3e7e93df3abf64d9d84564b18e540a5b5
SSDEEP

192:pgVArslNdvyF8Qmh6elyD6bSsEhadCLGzQR/B6hwhn/+sz9xkV0oaFVAr5Zv3fHo:frsxv1QxOk+CiUakbPUasVpfHYtS3O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ddbe7b2841fe7b247b3458e76645971

Files

5ddbe7b2841fe7b247b3458e76645971
.exe windows:1 windows x86 arch:x86

83a307b9d199bc8fa3dfd0906ab54792

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
ExitProcess
GetCurrentProcess
GetCurrentThreadId
GetLastError
HeapDestroy
InitializeCriticalSectionAndSpinCount
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
Sleep

user32

CharNextW
ReleaseDC

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ